Skip to content

Build(deps-dev): Bump @sveltejs/kit from 2.8.0 to 2.8.1

Dependabot requested to merge dependabot-npm_and_yarn-sveltejs-kit-2.8.1 into main

Bumps @sveltejs/kit from 2.8.0 to 2.8.1.

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.8.1

Patch Changes

  • fix: only add nonce to script-src-elem, style-src-attr and style-src-elem CSP directives when unsafe-inline is not present (#11613)

  • fix: support HTTP/2 in dev and production. Revert the changes from #12907 to downgrade HTTP/2 to TLS as now being unnecessary (#12989)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.8.1

Patch Changes

  • fix: only add nonce to script-src-elem, style-src-attr and style-src-elem CSP directives when unsafe-inline is not present (#11613)

  • fix: support HTTP/2 in dev and production. Revert the changes from #12907 to downgrade HTTP/2 to TLS as now being unnecessary (#12989)

Commits


Dependabot commands
You can trigger Dependabot actions by commenting on this MR
  • $dependabot recreate will recreate this MR rewriting all the manual changes and resolving conflicts

Merge request reports

Loading